Privacy Policy

Last updated: October 15, 2026

Capsule Hill ("we", "us") is a website for writing letters that stay sealed until a date you pick. It is run by Fazliddin Pochoev under the name Donish AI, based in North Carolina, USA. This page explains what we collect, why, and what you can do about it. Questions: hello@capsulehill.com.

What we collect

• Your account: your email address, the name you give us, and, if you add it, your birthday month and day (no year). If you sign in with Google, we get your email address and name from Google.
• Your capsules: the letters you write, when they open, the seal you picked, and who they're for.
• Friends you send to: when you send a capsule to a friend, you give us their name and email address so we can tell them a capsule is waiting. Only send to people who'd want it.
• Groups: the groups you make or join, the name you use there, and whether you're an admin. Other members see your name but never your email address.
• Emails we send: a record of which reminder emails we sent, so we don't send the same one twice.
• Contact form: your name (optional), email address and message.
• Reports and blocks: if you report a letter, we keep the reason you picked, any note you add, and a copy of that letter so we can review it. If you block someone, we keep who you blocked so their capsules don't reach you. The person you report or block isn't told.

We don't collect payment details, your location, your contacts, or anything from other websites. We don't use ads or tracking pixels. To count visitors we use Vercel Web Analytics, which doesn't use cookies and doesn't store personal information: it only records things like which page was viewed, the country, the device type and the website you came from, in a form that can't identify you. Some of our emails show a live countdown picture. Your email app loads it from our server when you open the email, and the link only contains the opening time, so it can't tell us who opened it.

Why we use it

• To sign you in and keep your capsules in your account.
• To keep each letter sealed until it opens, then show it only to the people it's for.
• To email you and your friends about your capsules: when one is waiting for you, when it's ready to open, and, for capsules that open more than a week later, a reminder 3 days before.
• If you leave it turned on, to email you about capsule seasons, your birthday, and a once-a-year "one year ago you wrote a letter" note. You can turn these off on your account page, which the link in each of those emails takes you to.
• To answer messages you send us, and to stop spam and abuse. When you write a letter, the site checks it for hurtful words like threats and slurs, and asks you to change them before it can be buried. This is an automatic word check; no person reads your letter for it.

We never sell your information and never use your letters for advertising. We don't use your letters to train AI models.

Who can read your letters

Before the opening time, the website won't show a letter to anyone, including you. After it opens, only you and the people it's addressed to can read it. Letters are stored on our database provider's servers and are not end-to-end encrypted. The people who run Capsule Hill could technically access them, and we only do that to fix a problem you asked us to fix, to review a letter someone reported, or when the law requires it. Please don't put passwords or anything truly secret in a letter.

Services we use

These companies process data for us to run the site:

• Supabase: our database and sign-in (stores your account, capsules and groups).
• Resend: sends our emails (receives the email address and the email we send).
• Vercel: hosts the website (sees your IP address when you visit, like every website host) and counts visits without cookies.
• Google: "Continue with Google" sign-in, if you use it, and the fonts on our pages (Google Fonts sees your IP address when your browser loads them).
• jsDelivr: delivers a piece of code the site needs to talk to our database (sees your IP address).

Some of these companies store data in the United States and other countries.

How long we keep it

We keep your account and capsules until you delete them or your account. When you leave a group, capsules from that group you haven't opened are removed for you. We keep reports as long as we need them to keep the site safe. We keep contact form messages as long as we need them to deal with your request, and you can ask us to delete them at any time.

Your choices and rights

• Delete everything: sign in, tap your name, then "Delete my account". This permanently deletes your login and all your data right away.
• Delete a letter: remove any opened letter from Past letters with the trash button.
• Get a copy, correct something, or ask a question: email hello@capsulehill.com and we'll reply within 30 days.

Depending on where you live (for example the EU, the UK or California), you may have more rights under laws like the GDPR or the CCPA. These include the right to access, correct, delete or move your data and to object to how we use it. You can use them by emailing us, and you can complain to your local data protection authority. We use your data because you asked us to run your account (our contract with you), for our legitimate interest in keeping the site safe, and, for season emails, because you agreed to them.

Children

You must be at least 13 to use Capsule Hill. We don't knowingly collect information from children under 13. If you think a child under 13 has an account, email us and we'll delete it.

Security

The site uses HTTPS, sign-in codes instead of passwords, and database rules that check who you are before showing anything. No system is perfectly secure. If we learn of a breach that affects you, we'll tell you as the law requires.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll email you before it takes effect.